What we review
- AWS, Azure, and Microsoft 365 subscriptions, resources, and usage patterns
- Unused, oversized, duplicated, or unmanaged cloud spend
- Identity hygiene, MFA coverage, admin roles, and risky access patterns
- Security baselines, tenant settings, logging, and obvious exposure points
- Backup, retention, recovery, and business continuity assumptions